Tags: CSCfi/pebbles

api: fix valid workspace types

WS_TYPE_FIXED_TIME was not accepted as a valid workspace type. Include
it and add a unit test to cover this.

Add contact field to direct questions to owner

New contact field to workspace form to add workspace owners contact

kubernetes_driver: increase session start timeout

Increase session start timeout to 30 minutes to allow autodownloads from
slow sources.

sso: auth method defaultWorkspaceQuota

Add defaultWorkspaceQuota configuration option to auth methods to
automatically promote users from selected identity sources to workspace
owners.

api: refactor role checks

Refactor manager and owner role checks. Move functions from rules module
to commons module, unify usage.

Fix `membership.is_manager = False` assignment in
`WorkspaceView.handle_status_change()`.

sso: map any idClaim attribute to existing user

During SSO login, find existing user object using every valid idClaim
attribute listed in selected provider. Add unit testing for sso.py.

Changes:
- sso.py
  - add lookup for existing users
  - refactor terms and conditions rendering to a function
  - improve error detection and reporting
- requirements.txt: add responses and fakefs libraries to mock
  responses from id provider and config and template files
- models.py: fix User.last_login_ts behaviour with None values
- add unit tests for sso.py
- remove redundant test_ext.py

source and target clusters for workspace restore

Add src_cluster and tgt_cluster to workspace restore tasks to support
migrating workspace data from one cluster to another.

Changes:
- WorkspaceController:
  - use tgt_cluster to select driver
  - check task attribute values
- BaseDriver & KubernetesDriver
  - add src_cluster to restore job creation

update requirements and .gitignore

- pycrypto has been deprecated, move to pycryptodome
- use psycopg2 binary package for easier and faster installation
- add local virtual environment to .gitignore

Add service announcements API

``` flask db migrate ```  is needed to make it work

- Added service announcements model
- Added service announcement api
- Added unit test for service announcement api
- announcement with is_public = true would be displayed for now.

sso: support hybrid flow

Fetch userinfo from server instead of extracting it from the idClaim.
Use idClaim still for verifying request authenticity and to get login
method.